$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e97d947b-969a-3360-954a-7c26f968bc09.roa File: e97d947b-969a-3360-954a-7c26f968bc09.roa (raw, json) Hash identifier: 150/gco7wZxpzLaKGhZm8Z2R3d+Jk5TU4EL93cvPXWw= Subject key identifier: DD:E8:4A:86:2D:86:CA:C8:8B:A9:52:7B:25:62:BF:3D:BA:0F:08:2E Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B79C9F2592588B55F3E7F2D00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e97d947b-969a-3360-954a-7c26f968bc09.roa Signing time: Fri 10 Oct 2025 13:27:24 +0000 ROA not before: Fri 10 Oct 2025 13:27:24 +0000 ROA not after: Thu 08 Jan 2026 14:27:24 +0000 asID: 19905 IP address blocks: 173.16.104.0/22 maxlen: 22 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Thu 06 Nov 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:79:c9:f2:59:25:88:b5:5f:3e:7f:2d:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 10 13:27:24 2025 GMT Not After : Jan 8 14:27:24 2026 GMT Subject: CN=b84938b7-1e23-446a-8006-169b24b96d0d Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:80:7b:aa:20:a1:a6:66:a7:e5:ed:2c:e2:12:a5: 3b:a4:ec:c3:6f:4f:37:be:de:e8:b9:1d:34:d4:5e: 80:92:cd:4c:9c:6d:5d:0b:b5:9a:18:35:8b:54:7c: d2:88:63:7e:5a:bf:f3:c5:2f:92:c2:8d:46:18:b8: ae:6d:a9:fd:af:a2:57:ff:2f:f8:78:3d:ee:cb:35: 9a:43:fa:59:7c:e6:80:11:b0:cf:22:14:36:f6:bd: 88:a4:23:11:d8:44:c3:03:6c:9e:41:66:f0:b7:da: f7:a0:1f:eb:74:e8:eb:ad:7f:59:4d:91:e0:b4:41: 4d:6d:85:ac:15:2e:7a:06:19:67:4c:00:c6:95:a7: ab:48:e3:3c:f2:ef:0f:a8:0a:1b:17:1c:04:6f:bc: 75:0d:78:b2:9f:d4:ef:e9:d1:e2:71:b0:b1:5e:87: 52:6c:99:37:d6:cf:68:99:24:2a:de:59:4b:2d:91: 00:9f:6e:2f:97:df:67:71:db:10:07:3f:27:6d:aa: 5c:e4:da:6c:c3:1f:90:89:d4:4a:c7:40:98:12:50: db:a6:19:f3:ec:4d:ce:f0:d6:f5:6e:81:9f:64:da: 48:f1:29:d2:9b:77:9d:28:0c:bd:55:6d:25:9f:12: 91:10:f1:b6:ee:3c:ad:60:a9:bc:79:4c:63:d4:b1: a7:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: DD:E8:4A:86:2D:86:CA:C8:8B:A9:52:7B:25:62:BF:3D:BA:0F:08:2E Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/e97d947b-969a-3360-954a-7c26f968bc09.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.16.104.0/22 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 3c:e2:c0:18:78:82:78:05:58:25:57:43:14:46:bc:ac:3e:21: e7:e4:0d:19:bc:5c:4e:0a:13:ed:5d:80:99:be:83:6a:bf:d6: fa:83:e0:9c:d1:ef:01:d2:c2:bb:c7:04:2d:49:5e:b3:08:de: 7a:40:77:55:75:b7:41:1c:41:3e:92:29:a4:fb:b7:21:97:06: 0a:6c:6d:78:f8:28:5b:d0:0e:92:2b:cc:e2:01:40:61:d6:9d: 75:5e:2a:31:06:b1:54:c0:b4:52:f0:80:25:c7:ed:43:12:c8: 2e:2a:77:cb:b5:ab:f4:27:d3:1e:a8:d6:c0:6a:b5:1c:af:b6: 98:bd:87:09:61:0b:9f:1c:81:78:5a:c0:00:77:35:88:8a:1c: 11:2b:dd:db:7e:63:1d:7b:04:90:01:75:32:11:7e:99:00:7e: 4d:7f:7d:ca:83:c8:9f:06:85:a9:c3:50:d8:7a:27:a9:e9:f4: cb:a7:37:f5:6b:67:a6:24:e8:0c:25:82:3c:d6:92:f0:f4:df: 9e:e0:89:58:1f:9e:6b:89:b0:a4:d1:34:e4:fc:e3:6d:7a:db: 5e:81:f8:5f:4d:41:ae:c0:0a:53:2f:d4:85:01:1f:ce:f0:e0: ee:f1:7a:ae:6e:2c:75:b7:eb:69:44:e4:ea:4c:4d:5e:e3:55: 41:4b:d1:da -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEt5yfJZJYi1Xz5/LQAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAxMDEzMjcyNFoXDTI2MDEwODE0MjcyNFowLzEtMCsGA1UEAxMk Yjg0OTM4YjctMWUyMy00NDZhLTgwMDYtMTY5YjI0Yjk2ZDBkMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgHuqIKGmZqfl7SziEqU7pOzDb083vt7ouR00 1F6Aks1MnG1dC7WaGDWLVHzSiGN+Wr/zxS+Swo1GGLiuban9r6JX/y/4eD3uyzWa Q/pZfOaAEbDPIhQ29r2IpCMR2ETDA2yeQWbwt9r3oB/rdOjrrX9ZTZHgtEFNbYWs FS56BhlnTADGlaerSOM88u8PqAobFxwEb7x1DXiyn9Tv6dHicbCxXodSbJk31s9o mSQq3llLLZEAn24vl99ncdsQBz8nbapc5Npswx+QidRKx0CYElDbphnz7E3O8Nb1 boGfZNpI8SnSm3edKAy9VW0lnxKREPG27jytYKm8eUxj1LGnawIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFN3oSoYthsrIi6lSeyVivz26DwguMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZTk3ZDk0N2ItOTY5YS0z MzYwLTk1NGEtN2MyNmY5NjhiYzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrRBoMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBADziwBh4gngFWCVXQxRGvKw+IefkDRm8XE4KE+1dgJm+g2q/1vqD4JzR 7wHSwrvHBC1JXrMI3npAd1V1t0EcQT6SKaT7tyGXBgpsbXj4KFvQDpIrzOIBQGHW nXVeKjEGsVTAtFLwgCXH7UMSyC4qd8u1q/Qn0x6o1sBqtRyvtpi9hwlhC58cgXha wAB3NYiKHBEr3dt+Yx17BJABdTIRfpkAfk1/fcqDyJ8GhanDUNh6J6np9MunN/Vr Z6Yk6AwlgjzWkvD0357giVgfnmuJsKTRNOT84216216B+F9NQa7AClMv1IUBH87w 4O7xeq5uLHW362lE5OpMTV7jVUFL0do= -----END CERTIFICATE-----Generated at Tue Nov 4 16:53:40 2025 by rpki-client